Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
File: HuXdRp9xw40T9Xxil5YiTMAg3BU.mft (raw, json)
Hash identifier: 5gqXePf40cosVVWbMi+mGsFv5Vn+Cv0crOm13aDP9EI=
Subject key identifier: 7C:8D:A2:8F:39:BE:9B:67:CD:5C:6B:1E:76:B7:D9:C1:A0:6F:70:E4
Authority key identifier: 1E:E5:DD:46:9F:71:C3:8D:13:F5:7C:62:97:96:22:4C:C0:20:DC:15
Certificate issuer: /CN=1ee5dd469f71c38d13f57c629796224cc020dc15
Certificate serial: 0198D73B037C0AD88580327AD7AFEF5B113B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
Manifest number: 09EA
Signing time: Sat 23 Aug 2025 14:00:25 +0000
Manifest this update: Sat 23 Aug 2025 14:00:25 +0000
Manifest next update: Sun 24 Aug 2025 14:00:25 +0000
Files and hashes: 1: HuXdRp9xw40T9Xxil5YiTMAg3BU.crl (hash: 3SWau0j2yJyLs6uo1TbPYM8QuMkgENmIveIYF+f+ggo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:03:7c:0a:d8:85:80:32:7a:d7:af:ef:5b:11:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ee5dd469f71c38d13f57c629796224cc020dc15
Validity
Not Before: Aug 23 14:00:25 2025 GMT
Not After : Aug 24 14:00:25 2025 GMT
Subject: CN=7c8da28f39be9b67cd5c6b1e76b7d9c1a06f70e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:07:47:46:ee:d6:3d:c8:89:9a:aa:13:03:92:
9a:c5:40:10:95:c7:fc:cf:e0:05:ae:e1:ac:07:a6:
ed:ea:1d:94:61:47:ea:43:e2:65:c8:26:03:37:00:
e0:5c:7a:25:04:9b:fd:a6:58:83:cc:e0:6e:89:5b:
cc:cb:31:98:45:69:cc:ad:59:94:78:43:28:3b:c9:
a8:26:f4:ea:af:fb:f9:30:ca:2e:9a:ff:a0:a3:05:
ff:a2:a4:da:46:ee:3f:07:00:c7:8f:f0:74:93:45:
ca:6b:00:d0:af:12:10:cd:1b:c6:60:11:cb:75:79:
67:cf:f3:37:4c:c9:31:66:9b:6b:ba:54:7c:6a:c7:
a8:68:3d:36:79:91:db:9b:2e:20:d3:00:d1:b8:32:
82:5d:69:17:3f:9f:f5:0d:60:99:16:fd:3e:d1:0a:
c5:78:9d:32:e2:bb:56:66:69:ae:17:a7:c9:21:3b:
29:1d:30:67:81:83:7c:25:4f:90:e2:09:3e:48:a6:
d4:00:75:02:44:39:d2:13:65:28:37:be:56:3c:c2:
99:0f:91:27:de:db:b7:14:a7:6d:21:9b:49:e0:47:
87:82:f2:6d:00:df:f9:0a:f5:6c:b6:81:95:2f:05:
6a:9e:3a:9d:8e:fd:5b:b6:39:22:70:ed:21:10:b6:
65:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8D:A2:8F:39:BE:9B:67:CD:5C:6B:1E:76:B7:D9:C1:A0:6F:70:E4
X509v3 Authority Key Identifier:
keyid:1E:E5:DD:46:9F:71:C3:8D:13:F5:7C:62:97:96:22:4C:C0:20:DC:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:50:09:76:b4:31:ff:2c:9c:72:11:13:3f:bf:c2:cf:d5:06:
7f:c3:48:43:23:67:4b:fa:9f:03:b6:ff:b6:f0:b5:40:4a:d9:
ab:9d:e5:25:4f:7f:bb:21:c4:95:8f:dc:2e:30:85:5c:9a:b1:
1a:07:a3:be:fa:d3:53:ad:da:6a:bf:aa:ff:35:8a:58:eb:a8:
4b:b5:cb:40:6c:45:ae:86:b4:4b:99:f1:34:84:10:e2:6e:d7:
62:fb:5e:9e:c4:93:e2:1e:66:ae:4b:60:9b:52:ee:61:d9:4e:
60:00:5f:fb:25:e0:88:02:ea:27:10:a9:7d:99:a3:1e:cc:0e:
82:14:d0:b0:92:c4:97:ff:78:d2:7c:d5:df:7a:81:16:a7:dd:
6f:0c:7a:27:15:a2:2c:ec:2d:5f:b9:23:67:0a:b5:47:2f:e0:
42:9a:8e:ef:64:01:93:4e:92:d5:37:73:af:00:1e:b2:fe:c8:
71:ff:e5:62:1d:9a:77:62:b5:f0:92:f3:54:46:44:12:02:da:
e4:a6:ad:60:64:18:c9:de:88:70:f5:47:70:90:8b:f7:4e:44:
85:5c:5f:03:d1:da:4f:99:bb:d4:d3:5d:3f:60:2e:56:c3:66:
02:61:9a:cd:21:00:13:2f:54:cf:73:64:c0:2d:05:e7:fa:01:
c3:01:17:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:07:21 2025 by rpki-client